From f7139ecdf556f2c6193ff5cc92fdcad40cf47e92 Mon Sep 17 00:00:00 2001
From: Brian Ingenito <28159742+bingenito@users.noreply.github.com>
Date: Mon, 13 Nov 2023 12:07:26 -0500
Subject: [PATCH] Update to Node.js 20 and add npm package provenance (#640)

---
 .github/workflows/continuous-integration.yml | 2 +-
 .github/workflows/release.yml                | 3 ++-
 packages/desktopjs-electron/package.json     | 2 +-
 packages/desktopjs-openfin/package.json      | 2 +-
 packages/desktopjs/package.json              | 2 +-
 5 files changed, 6 insertions(+), 5 deletions(-)

diff --git a/.github/workflows/continuous-integration.yml b/.github/workflows/continuous-integration.yml
index 4358224c..4e7c34aa 100644
--- a/.github/workflows/continuous-integration.yml
+++ b/.github/workflows/continuous-integration.yml
@@ -14,7 +14,7 @@ jobs:
     runs-on: ubuntu-latest
 
     env:
-      NODE_VERSION: '16'
+      NODE_VERSION: '20'
 
     steps:
     - uses: actions/checkout@v4.1.1
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index f3559ddb..1ddccb62 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -11,13 +11,14 @@ on:
 
 permissions:
   contents: write
+  id-token: write
 
 jobs:
   build:
     runs-on: ubuntu-latest
 
     env:
-      NODE_VERSION: '16'
+      NODE_VERSION: '20'
 
     steps:
     - name: Checkout
diff --git a/packages/desktopjs-electron/package.json b/packages/desktopjs-electron/package.json
index 62989d7c..55ebd982 100644
--- a/packages/desktopjs-electron/package.json
+++ b/packages/desktopjs-electron/package.json
@@ -31,7 +31,7 @@
     "build:workspaces": "gulp build:workspaces",
     "build": "gulp build",
     "test": "gulp test",
-    "deploy": "npm publish"
+    "deploy": "npm publish --provenance --access public"
   },
   "homepage": "https://github.com/MorganStanley/desktopJS/tree/main#readme",
   "devDependencies": {
diff --git a/packages/desktopjs-openfin/package.json b/packages/desktopjs-openfin/package.json
index 0919d2f6..a2b04ba5 100644
--- a/packages/desktopjs-openfin/package.json
+++ b/packages/desktopjs-openfin/package.json
@@ -32,7 +32,7 @@
     "build:workspaces": "gulp build:workspaces",
     "build": "gulp build",
     "test": "gulp test",
-    "deploy": "npm publish"
+    "deploy": "npm publish --provenance --access public"
   },
   "homepage": "https://github.com/MorganStanley/desktopJS/tree/main#readme",
   "devDependencies": {
diff --git a/packages/desktopjs/package.json b/packages/desktopjs/package.json
index 01c754f8..83b3b3f0 100644
--- a/packages/desktopjs/package.json
+++ b/packages/desktopjs/package.json
@@ -33,7 +33,7 @@
     "build:workspaces": "gulp build:workspaces",
     "build": "gulp build",
     "test": "gulp test",
-    "deploy": "npm publish",
+    "deploy": "npm publish --provenance --access public",
     "prepublishOnly": "copyfiles ../../README.md . -u 2"
   },
   "homepage": "https://github.com/MorganStanley/desktopJS#readme"